[Plone-installers] GPG Signatures for Installers

[Steve M. <st...@dc...>]

I've noticed that Wiggy (for tarballs) and Sidnei (for the Windows
installer) have been providing GPG signatures with their uploads. I'm also
ready to do so for the Unified and OS X installers.

This doesn't do us a lot of good, though, unless we publish our public keys
somewhere associated with the project.

And ... should we each be signing with our own keys, or should the installer
team share a (hopefully well controlled) key pair?

Steve

-- 

Steve McMahon
Reid-McMahon, LLC
st...@re...
st...@dc...